The Evolution of Personal Data Protection in Albania: A Comparative Analysis of the New and Old Law in Relation to General Data Protection Regulation

Abstract

The evolution of personal data protection in Albania reflects an effort to align domestic legislation with European Union standards, particularly with the General Data Protection Regulation (GDPR). The new law on personal data protection introduces significant changes compared to the previous law, strengthening transparency, accountability, and individuals' rights over their data. Through this law, the aim is to ensure more effective protection against the challenges of the digital age. The purpose of this paper is to analyze the key differences between the new and the old personal data protection law in Albania, as well as to assess the compliance of these changes with GDPR requirements. In particular, it will review how the new law improves mechanisms for protecting personal data and the rights of data subjects, including new concepts of transparency, data control, and oversight by relevant authorities. The paper also addresses practical challenges in implementing the new law, including the lack of public awareness, the institutional capacities needed for effective supervision, and the adaptation of the private sector to the new obligations. A comparison with the GDPR will help identify potential gaps and the steps needed for a more comprehensive harmonization with European standards. In the end, the paper offers recommendations to enhance the enforceability of the new law, including strengthening institutional oversight, increasing awareness of rights and obligations related to personal data, training key actors in the public and private sectors, and adapting the legal framework to technological developments. These measures will enhance personal data protection and ensure closer alignment with international standards.

Received: 20 April 2025 / Accepted: 8 June 2025 / Published: 25 June 2025